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Amendment Dated October 22, 2007 

Reply to Office Action mailed August 31 , 2007 

REMARKS 

In the Office Action mailed August 31 , 2007, claims 1 -5, 7-1 5, 1 7-24 and 26-28 
were finally rejected under 35 USC § 1 02(e) as anticipated by Cheline et al. US Patent 
Publication No. 2003/0041 136 ("Cheline"). 

Claims 6, 1 6 and 25 were finally rejected under 35 USC § 1 03 as being 
unpatentable over Cheline in view of Nguyen et al. US Patent Publication No. 
2003/0172145 ("Nguyen"). 

In this amendment, Applicant has cancelled claims 1 -28 to obviate the prior art 
rejections and has added claims 29-54. 

In a clear departure from the prior art, claims 29-54 recite novel approaches to VPN 
security that reduce vulnerability of a VPN protected network to attack by an end 
system. These novel approaches involve, for example, continuous monitoring, write 
prevention and redirection, traffic filtering and memory purging by an end system to 
reduce the risk that that the end system will become infected by malicious code and 
prevent any infection the end system experiences from spreading to the VPN protected 
network. 

Cheline alone or in combination with Nguyen and other art of record does not teach 
or suggest these novel approaches to VPN security. For example, there is no teaching 
or suggestion in the art of record, while permitting access by an end system to a VPN 
protected network on at least one VPN connection, to continuously monitor on the end 
system for attempted writes to the end system and prevent detected attempted writes to 
permanent memory on the end system, continuously monitor on the end system for 
traffic on the end system and filter detected traffic inbound to the end system that is 
not on the VPN connection and continuously monitor on the end system for 
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termination of the VPN connection and purge temporary memory on the end system in 
response to detected termination of the VPN connection. Additionally, there is no 
teaching or suggestion in the art of record to redirect to temporary memory detected 
attempted writes to permanent memory as part of continuous monitoring of attempted 
writes to the end system. Furthermore, there is no teaching or suggestion in the art of 
record to filter detected traffic outbound from the end system that is not on the VPN 
connection as part of continuous monitoring of traffic on the end system. 

In view of the foregoing, consideration and favorable action on all claims are 
respectfully requested. Accordingly, Applicant respectfully requests that a timely 
Notice of Allowance be issued in this case. 

Should any question remain in view of this communication, the Examiner is 
encouraged to call the undersigned so that a prompt disposition of this application 
can be achieved. 

Respectfully submitt^ir^? 
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